CVE-2023-43544

Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8775p:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

History

27 Jan 2025, 19:11

Type Values Removed Values Added
First Time Qualcomm wcn3980 Firmware
Qualcomm qca8337 Firmware
Qualcomm qcc710 Firmware
Qualcomm qam8775p Firmware
Qualcomm snapdragon Auto 5g Modem-rf Gen 2
Qualcomm sw5100 Firmware
Qualcomm wcn3988 Firmware
Qualcomm sa8770p Firmware
Qualcomm wsa8835
Qualcomm sw5100p Firmware
Qualcomm fastconnect 7800
Qualcomm sw5100p
Qualcomm qca8081 Firmware
Qualcomm fastconnect 7800 Firmware
Qualcomm qca6698aq Firmware
Qualcomm qcc710
Qualcomm sa8255p Firmware
Qualcomm qfw7124
Qualcomm qcn6274
Qualcomm snapdragon W5\+ Gen 1 Wearable
Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware
Qualcomm qam8775p
Qualcomm qca6584au Firmware
Qualcomm wsa8835 Firmware
Qualcomm qfw7114 Firmware
Qualcomm sa9000p
Qualcomm wsa8830 Firmware
Qualcomm qam8255p Firmware
Qualcomm sa8770p
Qualcomm ar8035
Qualcomm sa8775p
Qualcomm qam8255p
Qualcomm wcn3988
Qualcomm sa8255p
Qualcomm snapdragon W5\+ Gen 1 Wearable Firmware
Qualcomm snapdragon X75 5g Modem-rf
Qualcomm
Qualcomm sa8775p Firmware
Qualcomm sa9000p Firmware
Qualcomm wcn3980
Qualcomm sw5100
Qualcomm qfw7114
Qualcomm qca8081
Qualcomm ar8035 Firmware
Qualcomm qca6584au
Qualcomm qcn6274 Firmware
Qualcomm qcn6224
Qualcomm snapdragon X75 5g Modem-rf Firmware
Qualcomm qca8337
Qualcomm qfw7124 Firmware
Qualcomm wcd9340 Firmware
Qualcomm qcn6224 Firmware
Qualcomm wsa8830
Qualcomm wcd9340
Qualcomm qca6698aq
References () https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html - () https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html - Patch, Vendor Advisory
CPE cpe:2.3:h:qualcomm:qcc710:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_x75_5g_modem-rf_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8775p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn6224_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcc710_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7124:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qfw7114_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_x75_5g_modem-rf:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcn6274_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qfw7124_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6274:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qfw7114:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qcn6224:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*

21 Nov 2024, 08:24

Type Values Removed Values Added
Summary
  • (es) Corrupción de la memoria cuando se utiliza el identificador de devolución de llamada de IPC después de que otro subproceso lo haya liberado durante la devolución de llamada del registro.
References () https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html - () https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html -

03 Jun 2024, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-03 10:15

Updated : 2025-01-27 19:11


NVD link : CVE-2023-43544

Mitre link : CVE-2023-43544

CVE.ORG link : CVE-2023-43544


JSON object : View

Products Affected

qualcomm

  • qfw7114
  • wcn3988
  • qca8337_firmware
  • snapdragon_x75_5g_modem-rf
  • wcd9340_firmware
  • sa8770p_firmware
  • sa8255p
  • ar8035_firmware
  • fastconnect_7800
  • snapdragon_auto_5g_modem-rf_gen_2
  • wcn3980_firmware
  • sw5100p
  • sa9000p_firmware
  • wsa8830
  • snapdragon_x75_5g_modem-rf_firmware
  • qca6584au
  • qca8337
  • wsa8830_firmware
  • wsa8835
  • qcn6274
  • sa9000p
  • wcn3988_firmware
  • ar8035
  • qca6698aq
  • qcn6224
  • qcc710
  • qfw7124
  • fastconnect_7800_firmware
  • snapdragon_w5\+_gen_1_wearable
  • qca8081
  • qcn6224_firmware
  • sa8775p
  • qam8775p
  • qca6698aq_firmware
  • sw5100p_firmware
  • sa8775p_firmware
  • qam8255p
  • qfw7124_firmware
  • sa8770p
  • qcn6274_firmware
  • snapdragon_w5\+_gen_1_wearable_firmware
  • sw5100_firmware
  • sw5100
  • qcc710_firmware
  • wcd9340
  • wsa8835_firmware
  • qca8081_firmware
  • qca6584au_firmware
  • sa8255p_firmware
  • qam8255p_firmware
  • qam8775p_firmware
  • snapdragon_auto_5g_modem-rf_gen_2_firmware
  • qfw7114_firmware
  • wcn3980
CWE
CWE-416

Use After Free